Who is responsible for your information?
Sitebirch is a UK-based, one-person web design and development service. Sitebirch is the data controller for personal information sent directly through this website or to the business.
For privacy questions or requests, email contact@sitebirch.com.
What this website collects
Contact form: your name, email address, optional phone number, the services you select, your message and your confirmation that you are happy to be contacted about the enquiry.
WhatsApp: if you choose the WhatsApp link, Sitebirch receives the profile and message information you decide to share through WhatsApp.
Hosting: Cloudflare may process limited technical information, such as your IP address and request details, to deliver and protect the website.
Website analytics: Sitebirch uses Cloudflare Web Analytics to receive aggregated page-view and website-performance information, including navigation timing and Core Web Vitals. It is cookieless and Sitebirch does not use it to identify individual visitors, build visitor profiles or track people across websites.
Fonts: The Inter and Plus Jakarta Sans fonts are hosted on this website. Your browser downloads them from sitebirch.com together with the rest of the page, so no request is made to Google Fonts and no information is shared with Google when the fonts load.
Please do not send passwords, payment-card details or sensitive customer information through the form or WhatsApp.
Invoice requests and payments
Invoice requests store your name, business name if supplied, email, selected services and project notes in Sitebirch's Cloudflare D1 database. Invoices and payment references are used to manage your requested project and payment. Payment-card information is entered on Stripe's hosted checkout and is not stored by Sitebirch.
Following Stripe confirmation, a paid PDF invoice is sent to your email and Sitebirch's admin email through Resend. Keep private invoice links confidential: anyone with a link can view that invoice.
Invoice and payment records are kept for accounting and project administration, subject to applicable record-keeping requirements. Enquiries that do not become projects are reviewed periodically and removed when no longer needed. Contact Sitebirch to request access or deletion; records required for accounting may need to be retained.
Why the information is used
Enquiry information is used only to read your request, reply to you, understand the work you may need, prepare a quote and take steps you request before a possible contract.
The lawful basis for handling enquiries is taking steps at your request before entering a contract and Sitebirch’s legitimate interest in answering genuine business enquiries. Where processing relies on your consent, you may withdraw it at any time by email. Withdrawing consent does not affect earlier lawful processing.
Aggregated Cloudflare Web Analytics information is used to understand overall visits and website performance, and to improve the site’s usability and reliability. The lawful basis is Sitebirch’s legitimate interest in monitoring and improving its website using privacy-focused, cookieless analytics.
A separate first-party counter records only the date, public page path and aggregate page-view count. It uses no analytics cookies or visitor identifiers. Invoice and admin pages are excluded. Short-lived hashed IP rate-limit keys protect ordering and admin sign-in; expired keys are removed as requests are processed.
Your enquiry details are not used for unrelated marketing, sold, or used for automated decisions.
How long information is kept
Contact-form submissions and related enquiry emails are kept only as long as needed to respond to and manage the enquiry, then deleted unless there is a legal reason to keep a particular record for longer.
Web3Forms states that form-submission data may be retained by its service for up to three years from submission, unless a shorter plan limit applies or the data is deleted earlier.
WhatsApp messages remain subject to the retention choices and account settings used by Sitebirch and by you. You can request deletion from Sitebirch using the email below; deleting Sitebirch’s copy does not remove a copy held in your own WhatsApp account or by Meta.
Sitebirch receives aggregate Cloudflare Web Analytics reports rather than visitor-level profiles and keeps those reports only while they remain useful for measuring and improving the website. Cloudflare’s own processing and retention are governed by its privacy policy and service terms.
Who receives the information?
- Stripe processes payments on its hosted checkout. See Stripe’s privacy policy.
- Resend sends transactional payment confirmations and attached paid invoices. See Resend’s privacy policy.
- Web3Forms receives contact-form data and delivers it to Sitebirch by email. See the Web3Forms privacy policy.
- WhatsApp / Meta handles messages when you choose to contact Sitebirch through WhatsApp. See the WhatsApp UK privacy policy.
- Cloudflare hosts, delivers and protects this website, and provides Cloudflare Web Analytics. Its analytics beacon collects aggregated page-view and website-performance metrics. See the Cloudflare privacy policy.
Google Analytics is not installed and information is not sent to Google Analytics. For details about cookies and local storage, see the Cookies page.
These providers may process information outside the UK. Their privacy notices explain where they process data and the safeguards they use.
Your UK GDPR rights
Depending on the circumstances, you may ask Sitebirch to:
- give you access to your personal information;
- correct inaccurate or incomplete information;
- delete your information;
- restrict how your information is used;
- provide information in a portable format; or
- stop processing based on legitimate interests.
You may also withdraw consent where consent is the lawful basis. Some rights have legal limits. Sitebirch may need enough information to confirm your identity before acting on a request.
Requesting deletion or making a complaint
Email contact@sitebirch.com with the subject “Privacy request” and explain what you want deleted or reviewed.
If you are unhappy with the response, you can complain to the UK Information Commissioner’s Office. Visit the ICO complaint page for the current process and contact options. You may contact the ICO without first contacting Sitebirch, although giving Sitebirch a chance to resolve the issue may be quicker.